Privacy Policy

1. Introduction

Welcome to HakrTech ("we", "our", "us"). We are a software consultancy and application development company registered in Tamil Nadu, India. We are committed to protecting the personal data of our clients, website visitors, and anyone who interacts with us.

This Privacy Policy explains what personal data we collect, how we use it, and your rights in relation to your data under the Digital Personal Data Protection Act (DPDP), 2023 and any other applicable Indian laws.

By using our website at https://hakr.in/ or our services, you consent to the practices described in this policy.

2. Data Fiduciary Details

For the purposes of the DPDP Act, 2023:

• Data Fiduciary: HakrTech Software Solutions
• Registered Address: HakrTech Software Solutions, Near Thoraipakkam Signal, OMR, Chennai, Tamil Nadu, India
• Contact Email: privacy@hakr.in
• Data Protection Officer (DPO): You may contact our DPO at dpo@hakr.in

3. Personal Data We Collect

We collect personal data only to the extent necessary for a specific, lawful purpose. The categories of data we may collect include:

3.1 Data You Provide Directly

• Contact information: Name, email address, phone number, company name
• Project information: Details about your project or inquiry submitted via our contact form
• Account data: If you create an account or client portal access, your login credentials and preferences
• Communications: Emails, messages, or other communications you send to us

3.2 Data Collected Automatically

• Usage data: Pages visited, time spent on pages, clicks, scroll depth
• Technical data: IP address, browser type and version, device type, operating system, referring URLs
• Cookie data: As described in Section 8 below

3.3 Data from Third Parties

We may receive data about you from third-party sources such as analytics providers, social media platforms (if you interact with our profiles), or referral partners. We only use such data in accordance with this policy.

4. Purpose and Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data only for lawful purposes with your free, informed, specific, and unambiguous consent, or where processing is necessary for the performance of a contract or legal obligation. Our specific processing purposes are:

• To respond to your inquiries - when you submit the contact form, we use your name and email to respond to your query.
• To deliver our services - to fulfil contractual obligations with clients.
• To send service-related communications - project updates, invoices, legal notices.
• To improve our website - anonymised analytics to understand how our website is used.
• To comply with legal obligations - tax records, regulatory filings.
• Marketing (with consent) - only where you have explicitly opted in to receive newsletters or promotional material. You may withdraw consent at any time.

5. Consent

Where we rely on consent as the legal basis for processing, we will obtain your explicit consent before collecting your personal data. You have the right to withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal. To withdraw consent, contact us at privacy@hakr.in.

For users below the age of 18, we require verifiable parental or guardian consent before processing their personal data, in accordance with Section 9 of the DPDP Act, 2023.

6. Data Sharing and Disclosure

We do not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Service Providers (Data Processors): We engage third-party service providers (e.g., hosting, email, analytics) who process data on our behalf under strict data processing agreements.
• Legal Requirements: We may disclose data if required by law, court order, or governmental authority, including law enforcement agencies in India.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred. We will notify you prior to any such transfer.
• With Your Consent: For any other purpose with your explicit written consent.

7. Data Retention

We retain personal data only for as long as is necessary for the purpose for which it was collected, or as required by applicable law:

• Contact form submissions: 2 years from the date of submission
• Client project data: 7 years from project completion (for accounting/legal compliance)
• Website analytics data: 24 months (anonymised thereafter)
• Marketing consent records: Until consent is withdrawn plus 1 year

Once data is no longer required, we will securely delete or anonymise it.

8. Cookies

Our website uses cookies and similar technologies. We categorise cookies as follows:

• Strictly Necessary Cookies: Required for basic website functionality. Cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our site (e.g., Google Analytics). Used only with your consent.
• Preference Cookies: Remember your settings and preferences.
• Marketing Cookies: Used to show relevant advertisements. Used only with your explicit consent.

You can manage your cookie preferences via the cookie consent banner on our website or your browser settings. Please note that disabling certain cookies may affect website functionality.

9. Your Rights as a Data Principal (DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: You may request a summary of the personal data we hold about you and how it is being processed.
• Right to Correction: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to our legal obligations and legitimate interests.
• Right to Grievance Redressal: You have the right to file a grievance with our Data Protection Officer.
• Right to Nominate: You may nominate another person to exercise these rights on your behalf in the event of death or incapacity.
• Right to Withdraw Consent: You may withdraw consent for data processing at any time.

To exercise any of these rights, contact our DPO at dpo@hakr.in. We will respond within 30 days. If you are unsatisfied with our response, you may escalate to the Data Protection Board of India once it is constituted under the DPDP Act.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These include:

• SSL/TLS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Role-based access controls
• Regular security audits and penetration testing
• Employee training on data protection

In the event of a personal data breach that is likely to result in high risk to your rights, we will notify you and the relevant authorities as required by applicable law, without undue delay.

11. Cross-Border Data Transfers

Where we use third-party service providers located outside India, we ensure that appropriate safeguards are in place for the transfer of personal data, in accordance with any rules notified by the Central Government under the DPDP Act, 2023.

12. Children's Privacy

Our services are not directed at children under the age of 18. We do not knowingly collect personal data from minors without verifiable parental consent. If you believe we have inadvertently collected data from a child, please contact us immediately at privacy@hakr.in and we will delete it promptly.

13. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. We will notify you of material changes by posting a prominent notice on our website and, where we hold your email address, by email. The "Last Updated" date at the top of this page indicates when the policy was last revised. Continued use of our website after the effective date constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact: